Prevents multiple sessions from same location.

Adds validations that there is no valid session token before
creating a new session. Also simplifies searching for current_session
and current_user.